c6af3168a25dbf3fd9f533b25e73bdfa9b0d0ae543be6c8e79419ff016fbc183 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6af3168a25dbf3fd9f533b25e73bdfa9b0d0ae543be6c8e79419ff016fbc183
Size

63KB
MD5

a6baf42c849fe753e1eafe7e320c9fae
SHA1

181b50848c6a8a23702db756759b6d3655ec9b1e
SHA256

c6af3168a25dbf3fd9f533b25e73bdfa9b0d0ae543be6c8e79419ff016fbc183
SHA512

794617058ddea80dd9763f8f528f4a3d7a8d21cff7ace694db90c97dcdb7ebaef6f5c254b0274d8c31bf4a62a921264e361bce2b5b9640711dd3992daf3ba8b7
SSDEEP

1536:oTBHfmD+Ju2ahcgD4MIRNx1ypb7sDQuBk6B:KBHFQDcg8ZNmZsDE6B

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c6af3168a25dbf3fd9f533b25e73bdfa9b0d0ae543be6c8e79419ff016fbc183
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ